Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Secure your email by enabling the strongest multifactor authentication (MFA) your provider offers, updating recovery options, removing access you do not recognize, checking forwarding rules and filters, and reviewing mail-client access. These checks can reduce common ways someone might retain or misuse access, but no five settings can make an account hack-proof. Menu labels vary by provider; Gmail paths below are examples.
1. Turn on the strongest MFA your provider supports
MFA requires another proof of identity in addition to your password. Enable it in your email account’s security settings; Google calls the feature 2-Step Verification. CISA recommends MFA for email accounts and says, “Any MFA is better than none.” CISA’s consumer MFA guidance identifies FIDO/WebAuthn as the only widely available phishing-resistant authentication method it discusses.
When choosing a method, prefer a security key or another FIDO/WebAuthn option if your provider and devices support it. CISA’s guidance for organizations ranks security keys above number-matching and authenticator-app codes, with text or email codes lower in its security hierarchy; biometrics are generally device-specific and best combined with another method. See CISA’s MFA implementation guidance. Available methods differ by provider and account, so use the strongest supported option and retain a recovery method you control.
2. Check recovery email and phone details
A recovery address or phone number can help you regain access if you are locked out. Make sure each is current and belongs to you. An outdated number or an address you no longer control could complicate recovery; accurate details do not guarantee you will be able to recover an account.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
For Google accounts, open Google Security Checkup for personalized recommendations, including recovery and sign-in security. Google also recommends reviewing account permissions and recovery options in its Gmail security tips.
3. Review delegates, connected apps, and other account access
Look for people, apps, or sessions with access to your account that you do not recognize. In Gmail, open Settings (the gear icon), choose See all settings, then select Accounts and Import. Review Grant access to your account, Send mail as, and any listed accounts. Google specifically advises checking that these entries belong to you or are intentional.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Before removing an entry, confirm it is not a legitimate delegate, connected service, or mail workflow you still use. In other providers, look in account-security settings for connected apps, delegates, and active sessions; labels and available controls vary.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →4. Look for forwarding rules and filters that hide or redirect messages
A forwarding rule can send incoming mail elsewhere, while a filter that archives or deletes messages can make important activity harder to spot. In Gmail, open Settings > See all settings and inspect Forwarding and POP/IMAP and Filters and Blocked Addresses. Check that no unfamiliar address is receiving forwarded messages and that filters are not automatically deleting mail you expect to see.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Google’s Gmail guidance says, “Check to make sure that your messages aren’t being forwarded to an unknown account.” Remove only rules you cannot account for: a legitimate filter or forwarding address may support your normal workflow.
5. Review POP/IMAP and mail-client access
POP and IMAP let email clients access messages. Check whether these settings and any listed POP accounts match the apps and devices you use. In Gmail, review Settings > See all settings > Forwarding and POP/IMAP, along with account entries under Accounts and Import.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Do not disable a protocol simply because it is available. A desktop mail app, accessibility tool, or other deliberate workflow may depend on it. Remove or revoke access that is unfamiliar or no longer needed, and check your provider’s own security guidance for the controls it offers.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What these checks can—and cannot—do
These are account-level checks: they help you control sign-in, recovery, access, and message handling. They do not guarantee protection against every compromise, and the exact settings differ across email services. Google’s Security Settings and Tools page describes Security Checkup and 2-Step Verification for Google accounts.
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you administer your own email domain, domain-level protections are a separate task. CISA, NSA, FBI, and MS-ISAC recommend SPF and DKIM records and a DMARC policy—including a reject policy—to help reduce spoofing that uses your domain. These are mail-domain configuration measures, not personal inbox switches; see the agencies’ 2025 phishing guidance.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
